Senior Cyber Security Engineer

Job Description

What if your next security design helped protect the systems that save lives? Do you want to have a real impact on the cyber resilience of a global biopharmaceutical leader?

Senior Cyber Security Engineer

In our IT Risk Management & Security division, we don’t do dull routine - we protect the critical infrastructure that enables the development of future medicines. Right now, we are looking for an experienced partner to join us and take our identity security and PAM (Privileged Access Management) capabilities to the next level. Your work on key initiatives like securing global manufacturing sites will have an immediate impact and help us tackle future technology challenges, such as managing access for AI agents. You will become a key expert in our agile, highly collaborative global team (US, Czech Republic, India), where every voice matters.

What you will do:

• Build from scratch: Lead the complete deployment, configuration, and launch of our brand-new secrets management platform.
• Enhance enterprise security: Manage and develop our established privileged access and secrets management systems (on-premises and cloud).
• Steer the direction: Partner with application, infrastructure, and security teams worldwide to eliminate risks and implement modern standards.
• Drive innovation: Integrate security tools with automation (PowerShell) and modern CI/CD pipelines.
• Shape the future of security: Help us define the guardrails for secure governance of AI agents within our environment.
• Work in a human-centric team: No micromanagement. Enjoy agile collaboration and regular connection with international colleagues in the US, Prague, and Hyderabad.

What you should have:

• Background in IT security: At least 5 years of experience in identity management (IAM/PAM), or infrastructure security within an enterprise environment.
• Technical foundation you can rely on: Hands-on experience administering privileged access tools (e.g., Secret Server) and an understanding of concepts like password rotation, vaulting, secrets management, and least-privilege access.
• Modern Tech & Cloud Experience: Practical knowledge of HashiCorp Vault, Active Directory, or Microsoft Entra ID, coupled with experience securing access within public cloud environments like AWS, MS Azure, or Google Cloud.
• Drive to automate: Ability to connect security systems with automation (e.g., via PowerShell scripting).
• English for everyday use: Ability to communicate and collaborate with colleagues in a global team.

What we offer:

• Exciting work in a great team, global projects, international environment
• Opportunity to learn and grow professionally within the company globally
• Hybrid working model, flexible role pattern
• Competitive salary & incentive pay
• Pension and health insurance contributions
• Internal reward system and referral scheme
• 5 weeks annual leave, 5 sick days, 15 days of certified sick leave paid above statutory requirements annually, 40 paid hours annually for volunteering activities, 12 weeks of parental contribution
• Cafeteria for tax free benefits according to your choice (meal vouchers, sport, culture, health, travel, etc.), Multisport Card
• Vodafone, Raiffeisen Bank, Foodora, and discount programs
• Up-to-date laptop and iPhone
• Parking in the garage, showers, refreshments, massage chairs, library, music corner

Ready to take up the challenge? Apply now!

Know anybody who might be interested? Refer this job!

Required Skills:

Preferred Skills:

Current Employees apply HERE

Current Contingent Workers apply HERE

Search Firm Representatives Please Read Carefully

Merck & Co., Inc., Rahway, NJ, USA, also known as Merck Sharp & Dohme LLC, Rahway, NJ, USA, does not accept unsolicited assistance from search firms for employment opportunities. All CVs / resumes submitted by search firms to any employee at our company without a valid written search agreement in place for this position will be deemed the sole property of our company. No fee will be paid in the event a candidate is hired by our company as a result of an agency referral where no pre-existing agreement is in place. Where agency agreements are in place, introductions are position specific. Please, no phone calls or emails.

Employee Status:

Relocation:

VISA Sponsorship:

Travel Requirements:

Flexible Work Arrangements:

Shift:

Valid Driving License:

Hazardous Material(s):

Job Posting End Date:

*A job posting is effective until 11:59:59PM on the day BEFORE the listed job posting end date. Please ensure you apply to a job posting no later than the day BEFORE the job posting end date.